What is GHSA-p3hc-fv2j-rp68?

GHSA-p3hc-fv2j-rp68 is a security advisory published by GitHub Security Advisories with Critical severity. Prototype Pollution in swiper

Which CVE IDs does GHSA-p3hc-fv2j-rp68 cover?

GHSA-p3hc-fv2j-rp68 covers the following CVE IDs: CVE-2021-23370. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-p3hc-fv2j-rp68?

GHSA-p3hc-fv2j-rp68 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-p3hc-fv2j-rp68?

GHSA-p3hc-fv2j-rp68 affects 1 product, including: npm/swiper:\u003c 6.5.1.

GHSA-p3hc-fv2j-rp68CriticalCVSS 9.8

Prototype Pollution in swiper

Vendor

GitHub Security Advisories

Published

May 10, 2021

Last Modified

February 1, 2023

🔗 CVE IDs covered (1)

CVE-2021-23370 →

📋 Description

Versions of the package swiper before 6.5.1 are susceptible to prototype pollution.

🎯 Affected products1

npm/swiper:< 6.5.1

🔗 References (10)

https://nvd.nist.gov/vuln/detail/CVE-2021-23370
https://github.com/nolimits4web/Swiper/commit/ec358deab79a8cd2529465f07a0ead5dbcc264ad
https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178
https://github.com/nolimits4web/swiper/blob/master/CHANGELOG.md#651-2021-03-29
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696
https://snyk.io/vuln/SNYK-JS-SWIPER-1088062
https://github.com/advisories/GHSA-p3hc-fv2j-rp68